Patch Ray to 2.52.0 — a site you visit can run code on your cluster
CVSS 9.4 and actively exploited: CISA set an Aug 20 fix deadline as ShadowRay 2.0 mines crypto on unpatched GPU clusters via Firefox and Safari.
Copy markdown
One malicious tab, code on your box
CVE-2025-62593 (CVSS 9.4) sits on Ray's unauthenticated /api/jobs endpoints. Open a booby-trapped page in Firefox or Safari and DNS rebinding lets it reach your local Ray dashboard (default port 8265) and submit a job — running arbitrary code on your machine.
The fix: Ray 2.52.0, then lock down 8265
Every Ray build before 2.52.0 is vulnerable; upgrading closes it. Can't patch today? Bind the dashboard to 127.0.0.1, put it behind auth or a firewall, and never expose port 8265 to the network or to a browser you also surf with.
ShadowRay 2.0 is already on your GPUs
Attackers are turning unpatched clusters with NVIDIA GPUs into a self-replicating crypto-mining botnet, and the RondoDox DDoS botnet weaponized the flaw before public disclosure. If your Ray node has GPUs, treat it as a live target, not a maybe.
CISA's clock: KEV-listed, patch by Aug 20
CISA added the bug to its Known Exploited Vulnerabilities catalog on Aug 17 and gave federal agencies three days — the deadline lands tomorrow, Aug 20. A KEV listing means exploitation is confirmed in the wild, so this isn't a theoretical CVE to sit on.